You are making a number of crucial mistakes. Firstly you are directly placing variables into your prepare string. Use placeholders instead then the DBI/DBD will take care of escaping for you. You haven't fully worked out the SQL you need and until you do it is likely you will have some pretty awful problems!

First step is to check the tutorials on this site. You are making errors and using a coding style which is well discussed in several tutorials. Either go to www.mysql.com and carefully read the documentation there or go out and buy a good MySQL or SQL book.

You also have a similar quoting problem in building the checkboxes. I would suggest using CGI.pm to create them, which will, again, removing the quoting difficulties.

And remember - ONE WORD for me please - PLACEHOLDERS

jdtoronto